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Master Server accepts connection from CKU Server 

3310 






Master Server acknowledges connection 
3320 


^ 


r 


Master Server receives CKU Server CKDRM 
Certificate, engine's CKDRM Certificate, media SCID 
and DFS file handles from CKU Server 
3330 




r 


Master Server verifies validity of both certificates by, 
for example, checking MAC and PKl signatures 

3334 




f 


Master Server checks Revocation database to make 
sure there are no revoked certificates pending 
3336 




r 


Master Server retrieves requested Key Complements 
from Key Complement Database 
3340 




r 


Master Server encrypts 
CKU Serve 
33 


Key Complements using 

r Public Key 

50 






Master Server transmits encrypted data to CKU 
Server 
3360 




1 


Master Server receives ac 
Server and 

3G 


knowledgement from CKU 

disconnects 

170 
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Client accesses formatted URL, such as URL 
on media disk or URL associated with serial 
number on media disk or other source 
3410 




r 


Client presents query string containing SCID 
and locked content status 
3420 




r 


Web server constructs page to present offers 
to consumer using data from Offers and Ul 
Elements databases 
3430 




r 


Web server delivers "Unlocking in Progress" 
page to client 
3440 




r 


Web server generates unique SessionID that 
is used later to commit transaction after 
unlock process is verified 
3450 




r 


Web page embeds CKU Client object and 
contains client-side script that tells CKU Client 
to begin unlock process 
3454 




r 



Web server stores the SCID and list of D FS 

File Handles indexed by SessionID in 
Transaction Database for later use by CKU 
Server object 



3456 



FIG. 34 
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Engine receives handle and key 
complement to key box 
3610 



Engine performs key box look up 
3620 



Keys within key box are 
unbound and decrypted 
3630 



Keys are rebound, encrypted 
and locked 
3640 



FIG. 36 
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Process Start 
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3702 





DataPlay Media 

inserted into 
DataPlay-enabted 

Device that is 
Connected to a PC 
via the USB port 
3704 




Content Manager 
Presentation of 
Locked Content 
3708 



Package/Pricing 
Presentation - 
Consumer Selects 
Content to Unfock 
3714 



ContentKey Portal 
(not required) 
3710 



ContentKey Login 
3712 



Enter Billing and/or 
Customer 
Information 
Questions 
3716 



Presentation of 
Transaction 
Summary 
3718 



3700 



Credit Card 
Authorization 
(not required) 
3720 



£ 



£ 



Digital Clearing 
Server Notification 
3722 



ContentKey Engine 




Key Complement 


and Server 




Lookup, Delivery 


Authentication 


► 


and Writing 
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Presentation of 

ContentKey 
Enabling Status 
3724 



Contents.ddl File 
Update 
3730 



ContentKey 




eTailer Transaction 




Presentation of 


Transaction 




Complete 
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DCS Order Mgmt Server inserts records DCS_STAGE table 

with or without a Media ID 
3802 

i 

DCS Order Mgmt Serve generates a web page with a CKU 
Client instantiated with a Transaction ID 
3804 



J 

CKU Client obtains the Engine's CKDRM Certificate 
3806 



J 

CKU Client obtains the unique Media ID (if this is not 
already established the engine will do so) 
3808 



J 

CKU Client obtains the Server's ContentKey Certificate 
3810 



I 

CKU Client obtains the ESessionKey from the Engine using 
the CKU Server's CKDRM Certificate 
3812 



][ 

CKU Client makes final unlock request for validating and/or 
updating the DCS_STAGE table with the Media ID, 
authenticating the Engine, obtaining the File Handle/Key 
Complement/Version list and Wrapping the File Set 
3814 





r 


CKU Client sends the wrapped file set to the Engine so the 
Engine can unlock the content 
3816 




r 


CKU Client sends the final transaction status message to 
the server and displays a "Trx Complete" message to 
customer/user 
3818 




* 


DCS Order Mgmt Server receives the status complete 
notice, and deletes DCS_STAGE records for that 
transaction and updates transaction 
3820 
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Receive media containing locked content 
4002 




f 


Auto-Run Handier (or Content Manager) requests and obtains a Contents.ddt 

fite 

4004 




f 



Auto-Run Handler (or Content Manager) parses the Contents.ddt fie to obtain 
the PackageCollectionlD, PackageColleetionSKU, UnlockURL, Primary 
PackageSKU List + Business Entity ID, and a list of previously unlocked 
PackageSKU's 
4006 





f 


Auto-Run Handler (or Content Manager) appends the data to the URL and 
opens the default browser which will display a web page created by the eTailer 

4008 




f 


ETailer presents user/customer with a series of pages to process the 
eCommerce transaction 
4010 


\ 


f 



After a user/customer completes the transaction (e.g. clicking button and 
prompting eTailer) thereby requesting eTailer to notify the DCS of the 
ContentKey Unlock Transaction, eTailer passes the DCS the PCID, and a list 
of PackageSKU's that are to be unlocked 
4012 



J 

The DCS Order Mgmt component generates a unique Transaction ID and will 
insert one record for each Package purchased. At this point, the Media ID is 
not know so it will contain a null value. 
4014 

I 

The DCS replies to the eTailer with a failure message or a URL that the user/ 
customer uses to unlock content. The Unlock URL contains the Transaction ID 
that was generated by the DCS. 
4016 



The eTailer generates a final confirmation and unlock instructions page that 
contains the Unlock URL. 
4018 
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